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DETAILED ACTION 

Claim Rejections - 35 USC §101 

1. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, or 
any new and useful improvement thereof, may obtain a patent therefor, subject to the conditions and 
requirements of this title. 

the claimed invention is directed to non-statutory subject matter. Claim 7 indicates a computer 
Program and Claim 8 indicates a modulated carrier signal incorporating data corresponding to 
the computer, program or at least one of the suite of programs of claim 7. Signal claims and 
computer programs absent of a computer readable medium or equivalent storage thereof are non- 
statutory 

Claim Rejections - 35 USC § 102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a primed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

Claims 1-6 and 9 are rejected under 35 U.S.C. 102(b) as being anticipated by Ross WO 
02/41114 A2. 

Consider claim 1, Ross teaches a method for generating an authentication rating for an 
entity, comprising: receiving a message identifying an entity (e.g., an entity wishes to 
Authenticate a user) (see at least abstract, figure 1 and paragraphs 0025-0027), which 
message requires authentication of said entity(e.g., remote user authentication)( see at least 
abstract, figure 1 and paragraphs 0025-0027); receiving data from each of a plurality of 
sources (e.g., see paragraphs 0025, 0035-0041 and figures 1-2), said data representing at least 
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a rating for said authentication according to a criteria(e.g., see paragraphs 0025, 0035-0041 and 
figures 1-2); analysing said received data using a set of predefined fuzzy inferencing rules so as 
to calculate an authentication rating for said entity(e.g., see paragraphs 0025, 0035-0041 and 
figures 1-2). 

Consider claim 5, Ross teaches 5 a system for generating an authentication rating for an 
entity, comprising: receiving means for receiving a message identifying an entity e.g., an entity 
wishes to Authenticate a user) ( see at least abstract, figure 1 and paragraphs 0025-0027), 
which message requires identification of said entity(e.g., remote user authentication )( see at 
least abstract, figure 1 and paragraphs 0025-0027); the receiving means being further 
arranged to receive in use from each of a plurality of sources data representing a rating of said 
entity according to a criteria(e.g., see paragraphs 0025, 0035-0041 and figures 1-2); and 
processing means arranged in use to analyze said received data using a set of predefined fuzzy 
inferencing rules so as to calculate an authentication rating for said entity(e.g., see paragraphs 
0025, 0035-0041 and figures 1-2). 

Consider claim 2 and as applied to claim 1, Ross teaches wherein said data from each 
source comprise data representing a trust rating for said entity and data representing an 
associated confidence rating (i.e., a verification regarding the level of safety)(e.g., see 
paragraphs 0014, 0035 and 0041). 

Consider claim 3 and as applied to claim 2, Ross teaches wherein the analysis 
comprises: combining said plurality of data representing a trust rating using a first predefined set 
of fuzzy inferencing rules so as to calculate a combined trust rating(e.g., see paragraphs 0014, 
0025, 0035-0041 and figures 1-2); combining said plurality of confidence rating data using a 
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second predefined set of fuzzy inferencing rules to calculate a combined confidence rating (i.e., a 
database of information and a set of queries based on a subset of all queries) (e.g., see 
paragraphs 0014, 0025, 0035-0041 and figures 1-2); and then analysing said combined trust 
rating and said combined confidence rating using a third predefined set of fuzzy inferencing rules 
so as to calculate said authentication rating(i.e., a database of information and a set of queries 
based on a subset of all queries) (e.g., see paragraphs 0014, 0025, 0035-0041 and figures 1- 
2). 

Consider claim 4 and as applied to claim 1 , Ross teaches where one of the sources is a 
local store for storing previous case data relating to a user (e.g., see databases of figure 1 for 
storing data). 

Consider claim 6 and as applied to claim 5, Ross teaches said processing means being 
further arranged to compare said authentication rating with a predefined policy so as to 
determine whether to issue, an authenticate signal (e.g., see paragraphs 0014, 0025, 0035-0041 
and figures 1-2). 

Consider claim 9, Ross teaches computer readable storage medium storing a computer 
program or at least one of a suite of computer programs as claimed in claim 7(e.g., see figures 1 
and 2). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to CHARLES SHEDRICK whose telephone number is (571)272- 
8621 . The examiner can normally be reached on Monday thru Friday 8:00AM-4:30PM. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Harper Paul can be reached on (571)-272-7605. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/VINCENT P. HARPER/ 

Supervisory Patent Examiner, Art Unit 2617 

/Charles Shedrick/ 
Examiner, Art Unit 2617 
May 6, 2008 



